My guess is that by doing this, the Subnet 172.16.3.0/24 will not be able to reach the internet anymore, because it won’t be able to reach the uplink Subnet which is also a RFC1819 network. So in my opinion you would need to make an Allow rule with 172.16.3.0/24 as the Source and the uplink subnet as the destination, above the Deny rules. ... View more

I'm guessing EE have got IPv6 to IPv4 working properly then, which is good 👍 ... View more

@bxdobs wrote: Please Disregard my previous posting ... tried another machine which had exactly the same results with W10 Pro 64b   Turns out in this case the 691 error was CORRECT ... there may be an issue with the Meraki Dashboard used from the latest Firefox browser ... I explicitly CHANGED the PW for the VPN User to something simple as a temporary test ... this temporary password apparently wasn't accepted by the dashboard ... don't recollect seeing any error message when I pressed the change button so will take a closer look at this as a possible issue   Anyway I have now put back the original PW and reset all users ... all working now      I've caught myself before by thinking I've hit save when I haven't, when the save button is all the way at the bottom of the web page. I feel your pain. ... View more

I'm with Philp.  This is 100% normal.  I have the 1.2k pings to 8.8.8.8 almost constantly and it doesn't even register in the top 20 of things going through my firewall in terms of throughput.   For what it's worth, I have a 100Mbps Internet connection at my site.  The connection doesn't start to get saturated until the firewall is transferring over 10GB every 15 minutes as measured on my firewall (not Meraki MX).   If 70MB is causing issues, you either have a really slow Internet connection, or you have other network issues. ... View more

@DFWGuy wrote: I think that i am going to grab one of the MX64W models that I had for a clinic location and use it in my home office. That will save me dealing with the WiFi AP device set-up which is a layer for me. I know that the MX64W is largely a plug/play device and I have been into the dashboard, etc already. MX64W is ideal for small businesses or home office such as a clinic. But note that if you need to add additional APs to the network, the SSIDs and other WiFi settings are separate from the MX64W. ... View more

I used to work at a nuclear power plant that migrated from ROLM to Cisco VOIP. Funny bumper sticker but probably doesn't translate to 2018 very well. 🙂 ... View more

I know some IDS/IPS vendors have test sites for their products. They basically send a test pattern that will be picked up as a threat by their IDS/IPS.   http://www.kerio.com/control/ips-test   This is similar checking your AV by scanning the EICAR test file. Does anyone know of such a test for Sourcefire's SNORT? Or any other simple testing tool?   Thanks.   -P ... View more

Thanks Dante23. I opened a case and they did the same. ... View more

Thanks, that was it. I configured the Policy, but forgot to add the switch IP as a RADIUS Client. ... View more

I tried connecting from another workstation in the domain and it seems to be working as designed. I was a little confused about the name of the wireless network that the GP creates, but I figured that out by experimenting a little bit. I also tried connecting with an Android phone and a iOS tablet and both worked fine.   So, I think I am good for now. Thanks for replying to this thread (even though it's in the wrong forum). ... View more

I'd suggest using network equipment for DHCP as opposed to servers, the reason being server failure means your DHCP is offline and client devices will start to lose connectivity as leases expire.    Network equipment is very rarely offline or rebooted.  ... View more